Microsoft_WDF_UMDF_Version
StartW
Static task
static1
Behavioral task
behavioral1
Sample
trigger.bat
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
trigger.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
update.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
update.dll
Resource
win10v2004-20241007-en
Target
JaffaCakes118_4a2015231b4dfe16b32d48c49cf38fb098e01a2dd5016eb91304d2ba033d6901
Size
217KB
MD5
abe6e67042e24099c880a9149cc764af
SHA1
2d89c1bf6ecf1fe12a2505dd4a9f875b631b18dd
SHA256
4a2015231b4dfe16b32d48c49cf38fb098e01a2dd5016eb91304d2ba033d6901
SHA512
300592c3924cc13cf9ca6971a4cb82ab88bffbb8ac434f9d8e53d602c712ca6953a85574b3fcafa37d1c330168c072a5247ea418f980c415f613394fce75930b
SSDEEP
3072:tn8OkeG/4RxKh3tl394QZxD9tYys44YQg9JLrok8HT8OqmUDfHeOfbymjVZgWsK:xg4RIT4/440yk8HT8oUDfHJmmpZpsK
Checks for missing Authenticode signature.
resource |
---|
unpack001/update.dll |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sleep
InterlockedIncrement
InterlockedDecrement
ExitProcess
LoadLibraryExW
GetLastError
LoadLibraryExA
CreateFileW
FlushFileBuffers
GetStringTypeW
WriteConsoleW
SetStdHandle
LCMapStringEx
LoadLibraryW
OutputDebugStringW
HeapReAlloc
EncodePointer
DecodePointer
GetCommandLineA
GetCurrentThreadId
RaiseException
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
HeapFree
HeapAlloc
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
HeapSize
EnterCriticalSection
LeaveCriticalSection
GetStdHandle
WriteFile
GetModuleFileNameW
SetLastError
GetProcessHeap
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InitOnceExecuteOnce
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetModuleHandleW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
CloseHandle
SendMessageW
CryptAcquireContextA
Microsoft_WDF_UMDF_Version
StartW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ